Microsoft 365 & Entra ID Graph API - Integration Guide
The FutureFeed platform supports API integrations that automatically collect evidence and inventory data from external services. This article covers how to configure the Microsoft 365 / Entra ID Graph API Evidence Connector, manage available API services, and request additional endpoints or integrations.
Navigating to API Integration Settings
To access the API integration configuration:
- Log in to the FutureFeed platform.
- From the left sidebar, click Start to open the main navigation menu.
- Expand Settings and select Platform/API.
- On the API Integrations page, locate the Microsoft 365 / Entra ID Graph API Evidence Connector and click Configure (or Manage if already connected).
|
📌 Note: The Platform/API section is located under Settings in the Start menu, near the bottom of the navigation list. |
Connecting the Microsoft 365 / Entra ID Graph API Evidence Connector
Initial Connection
When you click Configure on the connector, a dialog will appear prompting you to connect your Microsoft 365 account. You will be redirected to Microsoft to sign in securely.
Select the appropriate Microsoft Cloud Environment before connecting:
- Commercial — For standard Microsoft 365 accounts.
- GCC High — For US Government cloud tenants.
Click CONNECT WITH MICROSOFT 365 to initiate the authentication flow. Your credentials are securely stored and can be removed at any time.
|
📌 Note: Select GCC High only if your organization uses a US Government Microsoft cloud tenant. |
Managing the Connector
Once connected, click Manage on the connector card to open the management dialog. From here you can:
- View the current Connection Status (Connected / Disconnected).
- Expand Connection Details to review the linked account information.
- Browse and search all available API Services.
- Request additional endpoints via the Request an Endpoint button.
- Update credentials or remove the integration entirely.
Available API Services
The following Microsoft 365 / Entra ID API services are currently available:
|
Data Type |
Description |
Required Permission |
|
Users |
All Azure AD / Entra ID users |
User.Read.All |
|
Privileged Users |
Global Admins, Security Admins, etc. |
Directory.Read.All |
|
Devices |
Registered and joined devices |
Device.Read.All |
|
Groups |
Security groups and membership |
Group.Read.All |
|
Conditional Access Policies |
MFA and access policies |
Policy.Read.All |
|
Sign-In Logs |
User sign-in activity |
AuditLog.Read.All |
|
Directory Audit Logs |
Directory change history |
AuditLog.Read.All |
|
Security Alerts |
Microsoft Defender alerts |
SecurityEvents.Read.All |
|
Security Incidents |
Correlated security incidents |
SecurityEvents.Read.All |
|
Secure Scores |
Microsoft Secure Score results |
SecurityEvents.Read.All |
|
Secure Score Control Profiles |
Secure Score recommendations |
SecurityEvents.Read.All |
Requesting Additional Endpoints or Integrations
Request a New API Endpoint
If a specific Microsoft 365 / Entra ID data endpoint is not currently listed under API Services, you can request it directly within the Manage dialog:
- Open the Manage dialog for the Microsoft 365 connector.
- Click Request an Endpoint (top right of the API Services section).
- Submit your request. The FutureFeed team will review and respond.
Request a New API Integration
To request a connection to a new external service (beyond Microsoft 365):
- Navigate to Start > Settings > Platform/API.
- Click Request an Integration (top right of the API Integrations page).
- Provide details about the integration you need. The team will follow up.
Removing the Integration
To disconnect the Microsoft 365 connector:
-
Open the Manage dialog.
-
Click REMOVE INTEGRATION (bottom left, shown in red).
-
Confirm the removal when prompted.
|
📌 Note: Removing the integration will stop all automatic evidence and inventory collection from Microsoft 365. This action can be reversed by reconnecting at any time. |
Adding Data from API as Evidence:
To start pulling data from Microsoft Graph into your FutureFeed subscription please see this article:
From Task to Evidence: How the Evidence Collection Workflow Works